2010-07-02 01:48:07 +02:00
|
|
|
<?php
|
|
|
|
|
|
|
|
set_time_limit(0);
|
|
|
|
|
2011-02-09 03:44:30 +01:00
|
|
|
define ( 'BUILD_ID', 1038 );
|
2011-02-09 05:55:34 +01:00
|
|
|
define ( 'FRIENDIKA_VERSION', '2.10.0906' );
|
2011-02-02 06:21:47 +01:00
|
|
|
define ( 'DFRN_PROTOCOL_VERSION', '2.1' );
|
2010-07-02 01:48:07 +02:00
|
|
|
|
2010-10-13 11:47:32 +02:00
|
|
|
define ( 'EOL', "<br />\r\n" );
|
|
|
|
define ( 'ATOM_TIME', 'Y-m-d\TH:i:s\Z' );
|
2010-12-11 13:16:58 +01:00
|
|
|
define ( 'DOWN_ARROW', '⇩' );
|
|
|
|
|
2011-01-30 07:35:11 +01:00
|
|
|
|
|
|
|
/**
|
|
|
|
* SSL redirection policies
|
|
|
|
*/
|
|
|
|
|
|
|
|
define ( 'SSL_POLICY_NONE', 0 );
|
|
|
|
define ( 'SSL_POLICY_FULL', 1 );
|
2011-01-30 07:41:01 +01:00
|
|
|
define ( 'SSL_POLICY_SELFSIGN', 2 );
|
2011-01-30 07:35:11 +01:00
|
|
|
|
|
|
|
|
2010-12-10 13:04:35 +01:00
|
|
|
/**
|
|
|
|
* log levels
|
|
|
|
*/
|
2010-11-02 01:56:36 +01:00
|
|
|
|
|
|
|
define ( 'LOGGER_NORMAL', 0 );
|
|
|
|
define ( 'LOGGER_TRACE', 1 );
|
|
|
|
define ( 'LOGGER_DEBUG', 2 );
|
|
|
|
define ( 'LOGGER_DATA', 3 );
|
|
|
|
define ( 'LOGGER_ALL', 4 );
|
|
|
|
|
2010-12-10 13:04:35 +01:00
|
|
|
/**
|
|
|
|
* registration policies
|
|
|
|
*/
|
2010-10-13 11:47:32 +02:00
|
|
|
|
|
|
|
define ( 'REGISTER_CLOSED', 0 );
|
|
|
|
define ( 'REGISTER_APPROVE', 1 );
|
|
|
|
define ( 'REGISTER_OPEN', 2 );
|
2010-07-02 01:48:07 +02:00
|
|
|
|
2010-12-10 13:04:35 +01:00
|
|
|
/**
|
|
|
|
* relationship types
|
|
|
|
*/
|
2010-07-02 01:48:07 +02:00
|
|
|
|
2010-09-10 01:48:33 +02:00
|
|
|
define ( 'REL_VIP', 1);
|
|
|
|
define ( 'REL_FAN', 2);
|
|
|
|
define ( 'REL_BUD', 3);
|
|
|
|
|
2010-12-22 23:16:22 +01:00
|
|
|
/**
|
|
|
|
* Hook array order
|
|
|
|
*/
|
|
|
|
|
|
|
|
define ( 'HOOK_HOOK', 0);
|
|
|
|
define ( 'HOOK_FILE', 1);
|
|
|
|
define ( 'HOOK_FUNCTION', 2);
|
2010-10-17 07:11:21 +02:00
|
|
|
|
2010-12-10 13:04:35 +01:00
|
|
|
/**
|
|
|
|
*
|
|
|
|
* page/profile types
|
|
|
|
*
|
|
|
|
* PAGE_NORMAL is a typical personal profile account
|
|
|
|
* PAGE_SOAPBOX automatically approves all friend requests as REL_FAN, (readonly)
|
|
|
|
* PAGE_COMMUNITY automatically approves all friend requests as REL_FAN, but with
|
|
|
|
* write access to wall and comments (no email and not included in page owner's ACL lists)
|
|
|
|
* PAGE_FREELOVE automatically approves all friend requests as full friends (REL_BUD).
|
|
|
|
*
|
|
|
|
*/
|
2010-10-17 07:11:21 +02:00
|
|
|
|
|
|
|
define ( 'PAGE_NORMAL', 0 );
|
2010-10-18 05:04:17 +02:00
|
|
|
define ( 'PAGE_SOAPBOX', 1 );
|
|
|
|
define ( 'PAGE_COMMUNITY', 2 );
|
|
|
|
define ( 'PAGE_FREELOVE', 3 );
|
2010-10-17 07:11:21 +02:00
|
|
|
|
2010-12-10 13:04:35 +01:00
|
|
|
/**
|
|
|
|
* Maximum number of "people who like (or don't like) this" that we will list by name
|
|
|
|
*/
|
2010-10-13 02:11:06 +02:00
|
|
|
|
|
|
|
define ( 'MAX_LIKERS', 75);
|
|
|
|
|
2010-12-10 13:04:35 +01:00
|
|
|
/**
|
|
|
|
* email notification options
|
|
|
|
*/
|
2010-10-13 02:11:06 +02:00
|
|
|
|
2010-07-22 11:13:39 +02:00
|
|
|
define ( 'NOTIFY_INTRO', 0x0001 );
|
|
|
|
define ( 'NOTIFY_CONFIRM', 0x0002 );
|
|
|
|
define ( 'NOTIFY_WALL', 0x0004 );
|
|
|
|
define ( 'NOTIFY_COMMENT', 0x0008 );
|
|
|
|
define ( 'NOTIFY_MAIL', 0x0010 );
|
|
|
|
|
2010-12-10 13:04:35 +01:00
|
|
|
/**
|
|
|
|
* various namespaces we may need to parse
|
|
|
|
*/
|
2010-10-13 11:47:32 +02:00
|
|
|
|
2010-09-10 02:55:59 +02:00
|
|
|
define ( 'NAMESPACE_DFRN' , 'http://purl.org/macgirvin/dfrn/1.0' );
|
|
|
|
define ( 'NAMESPACE_THREAD' , 'http://purl.org/syndication/thread/1.0' );
|
|
|
|
define ( 'NAMESPACE_TOMB' , 'http://purl.org/atompub/tombstones/1.0' );
|
|
|
|
define ( 'NAMESPACE_ACTIVITY', 'http://activitystrea.ms/spec/1.0/' );
|
2010-10-25 05:39:24 +02:00
|
|
|
define ( 'NAMESPACE_ACTIVITY_SCHEMA', 'http://activitystrea.ms/schema/1.0/' );
|
2010-11-04 00:48:21 +01:00
|
|
|
define ( 'NAMESPACE_MEDIA', 'http://purl.org/syndication/atommedia' );
|
2010-10-25 05:39:24 +02:00
|
|
|
define ( 'NAMESPACE_SALMON_ME', 'http://salmon-protocol.org/ns/magic-env' );
|
|
|
|
define ( 'NAMESPACE_OSTATUSSUB', 'http://ostatus.org/schema/1.0/subscribe' );
|
|
|
|
define ( 'NAMESPACE_GEORSS', 'http://www.georss.org/georss' );
|
|
|
|
define ( 'NAMESPACE_POCO', 'http://portablecontacts.net/spec/1.0' );
|
|
|
|
define ( 'NAMESPACE_FEED', 'http://schemas.google.com/g/2010#updates-from' );
|
2010-09-10 02:55:59 +02:00
|
|
|
|
2010-12-10 13:04:35 +01:00
|
|
|
/**
|
|
|
|
* activity stream defines
|
|
|
|
*/
|
2010-10-13 11:47:32 +02:00
|
|
|
|
2010-09-09 05:14:17 +02:00
|
|
|
define ( 'ACTIVITY_LIKE', NAMESPACE_ACTIVITY_SCHEMA . 'like' );
|
2010-09-10 03:49:19 +02:00
|
|
|
define ( 'ACTIVITY_DISLIKE', NAMESPACE_DFRN . '/dislike' );
|
2010-09-10 02:55:59 +02:00
|
|
|
define ( 'ACTIVITY_OBJ_HEART', NAMESPACE_DFRN . '/heart' );
|
|
|
|
|
2010-09-09 05:14:17 +02:00
|
|
|
define ( 'ACTIVITY_FRIEND', NAMESPACE_ACTIVITY_SCHEMA . 'make-friend' );
|
2010-10-22 06:48:22 +02:00
|
|
|
define ( 'ACTIVITY_FOLLOW', NAMESPACE_ACTIVITY_SCHEMA . 'follow' );
|
2011-01-03 14:58:27 +01:00
|
|
|
define ( 'ACTIVITY_UNFOLLOW', NAMESPACE_ACTIVITY_SCHEMA . 'stop-following' );
|
2010-09-09 05:14:17 +02:00
|
|
|
define ( 'ACTIVITY_POST', NAMESPACE_ACTIVITY_SCHEMA . 'post' );
|
|
|
|
define ( 'ACTIVITY_UPDATE', NAMESPACE_ACTIVITY_SCHEMA . 'update' );
|
2010-11-05 04:47:44 +01:00
|
|
|
define ( 'ACTIVITY_TAG', NAMESPACE_ACTIVITY_SCHEMA . 'tag' );
|
2010-09-09 05:14:17 +02:00
|
|
|
|
|
|
|
define ( 'ACTIVITY_OBJ_COMMENT', NAMESPACE_ACTIVITY_SCHEMA . 'comment' );
|
|
|
|
define ( 'ACTIVITY_OBJ_NOTE', NAMESPACE_ACTIVITY_SCHEMA . 'note' );
|
|
|
|
define ( 'ACTIVITY_OBJ_PERSON', NAMESPACE_ACTIVITY_SCHEMA . 'person' );
|
|
|
|
define ( 'ACTIVITY_OBJ_PHOTO', NAMESPACE_ACTIVITY_SCHEMA . 'photo' );
|
|
|
|
define ( 'ACTIVITY_OBJ_P_PHOTO', NAMESPACE_ACTIVITY_SCHEMA . 'profile-photo' );
|
|
|
|
define ( 'ACTIVITY_OBJ_ALBUM', NAMESPACE_ACTIVITY_SCHEMA . 'photo-album' );
|
|
|
|
|
2010-12-10 13:04:35 +01:00
|
|
|
/**
|
|
|
|
* item weight for query ordering
|
|
|
|
*/
|
2010-10-13 11:47:32 +02:00
|
|
|
|
2010-09-17 12:10:19 +02:00
|
|
|
define ( 'GRAVITY_PARENT', 0);
|
|
|
|
define ( 'GRAVITY_LIKE', 3);
|
|
|
|
define ( 'GRAVITY_COMMENT', 6);
|
2010-09-09 05:14:17 +02:00
|
|
|
|
2010-12-10 13:04:35 +01:00
|
|
|
/**
|
|
|
|
*
|
|
|
|
* Reverse the effect of magic_quotes_gpc if it is enabled.
|
|
|
|
* Please disable magic_quotes_gpc so we don't have to do this.
|
|
|
|
* See http://php.net/manual/en/security.magicquotes.disabling.php
|
|
|
|
*
|
|
|
|
*/
|
2010-11-24 08:42:45 +01:00
|
|
|
|
|
|
|
if (get_magic_quotes_gpc()) {
|
|
|
|
$process = array(&$_GET, &$_POST, &$_COOKIE, &$_REQUEST);
|
|
|
|
while (list($key, $val) = each($process)) {
|
|
|
|
foreach ($val as $k => $v) {
|
|
|
|
unset($process[$key][$k]);
|
|
|
|
if (is_array($v)) {
|
|
|
|
$process[$key][stripslashes($k)] = $v;
|
|
|
|
$process[] = &$process[$key][stripslashes($k)];
|
|
|
|
} else {
|
|
|
|
$process[$key][stripslashes($k)] = stripslashes($v);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
unset($process);
|
|
|
|
}
|
|
|
|
|
2010-07-22 11:13:39 +02:00
|
|
|
|
2010-12-10 13:04:35 +01:00
|
|
|
/**
|
|
|
|
*
|
|
|
|
* class: App
|
|
|
|
*
|
|
|
|
* Our main application structure for the life of this page
|
|
|
|
* Primarily deals with the URL that got us here
|
|
|
|
* and tries to make some sense of it, and
|
|
|
|
* stores our page contents and config storage
|
|
|
|
* and anything else that might need to be passed around
|
|
|
|
* before we spit the page out.
|
|
|
|
*
|
|
|
|
*/
|
2010-09-28 02:16:52 +02:00
|
|
|
|
2010-07-02 01:48:07 +02:00
|
|
|
if(! class_exists('App')) {
|
|
|
|
class App {
|
|
|
|
|
|
|
|
public $module_loaded = false;
|
2010-12-14 23:15:31 +01:00
|
|
|
public $query_string;
|
2010-07-02 01:48:07 +02:00
|
|
|
public $config;
|
|
|
|
public $page;
|
|
|
|
public $profile;
|
|
|
|
public $user;
|
2010-07-06 06:39:55 +02:00
|
|
|
public $cid;
|
2010-07-17 02:16:50 +02:00
|
|
|
public $contact;
|
2010-07-02 01:48:07 +02:00
|
|
|
public $content;
|
2010-08-04 07:33:53 +02:00
|
|
|
public $data;
|
2010-07-02 01:48:07 +02:00
|
|
|
public $error = false;
|
|
|
|
public $cmd;
|
|
|
|
public $argv;
|
|
|
|
public $argc;
|
|
|
|
public $module;
|
2010-07-10 09:45:18 +02:00
|
|
|
public $pager;
|
2010-07-27 07:48:08 +02:00
|
|
|
public $strings;
|
2010-08-16 06:49:29 +02:00
|
|
|
public $path;
|
2010-12-21 04:38:34 +01:00
|
|
|
public $hooks;
|
2011-01-14 05:28:33 +01:00
|
|
|
public $timezone;
|
2010-10-18 05:04:17 +02:00
|
|
|
public $interactive = true;
|
2011-02-11 01:17:21 +01:00
|
|
|
public $plugins;
|
2010-12-21 04:38:34 +01:00
|
|
|
|
2010-07-02 01:48:07 +02:00
|
|
|
private $scheme;
|
|
|
|
private $hostname;
|
2010-07-19 05:49:10 +02:00
|
|
|
private $baseurl;
|
2010-07-02 01:48:07 +02:00
|
|
|
private $db;
|
|
|
|
|
2010-10-14 07:01:23 +02:00
|
|
|
private $curl_code;
|
2010-10-21 13:53:43 +02:00
|
|
|
private $curl_headers;
|
2010-10-14 07:01:23 +02:00
|
|
|
|
2010-07-02 01:48:07 +02:00
|
|
|
function __construct() {
|
|
|
|
|
|
|
|
$this->config = array();
|
|
|
|
$this->page = array();
|
2010-07-10 09:45:18 +02:00
|
|
|
$this->pager= array();
|
2010-07-02 01:48:07 +02:00
|
|
|
|
2010-12-14 23:15:31 +01:00
|
|
|
$this->query_string = '';
|
|
|
|
|
2010-10-20 00:51:56 +02:00
|
|
|
$this->scheme = ((isset($_SERVER['HTTPS']) && ($_SERVER['HTTPS'])) ? 'https' : 'http' );
|
2010-10-30 22:25:37 +02:00
|
|
|
|
2011-02-07 04:15:20 +01:00
|
|
|
if(x($_SERVER,'SERVER_NAME')) {
|
2010-10-30 22:25:37 +02:00
|
|
|
$this->hostname = $_SERVER['SERVER_NAME'];
|
|
|
|
|
2011-02-07 04:15:20 +01:00
|
|
|
/**
|
|
|
|
* Figure out if we are running at the top of a domain
|
|
|
|
* or in a sub-directory and adjust accordingly
|
|
|
|
*/
|
|
|
|
|
|
|
|
$path = trim(dirname($_SERVER['SCRIPT_NAME']),'/\\');
|
|
|
|
if(isset($path) && strlen($path) && ($path != $this->path))
|
|
|
|
$this->path = $path;
|
|
|
|
}
|
|
|
|
|
2010-10-20 00:51:56 +02:00
|
|
|
set_include_path("include/$this->hostname" . PATH_SEPARATOR . 'include' . PATH_SEPARATOR . '.' );
|
|
|
|
|
2010-11-15 00:17:27 +01:00
|
|
|
if((x($_SERVER,'QUERY_STRING')) && substr($_SERVER['QUERY_STRING'],0,2) === "q=")
|
2010-12-14 23:15:31 +01:00
|
|
|
$this->query_string = substr($_SERVER['QUERY_STRING'],2);
|
2010-10-30 22:25:37 +02:00
|
|
|
if(x($_GET,'q'))
|
2010-12-23 23:40:32 +01:00
|
|
|
$this->cmd = trim($_GET['q'],'/\\');
|
2010-07-02 01:48:07 +02:00
|
|
|
|
2010-07-10 09:45:18 +02:00
|
|
|
|
2010-12-11 05:21:34 +01:00
|
|
|
|
|
|
|
/**
|
|
|
|
*
|
|
|
|
* Break the URL path into C style argc/argv style arguments for our
|
|
|
|
* modules. Given "http://example.com/module/arg1/arg2", $this->argc
|
|
|
|
* will be 3 (integer) and $this->argv will contain:
|
|
|
|
* [0] => 'module'
|
|
|
|
* [1] => 'arg1'
|
|
|
|
* [2] => 'arg2'
|
|
|
|
*
|
|
|
|
*
|
|
|
|
* There will always be one argument. If provided a naked domain
|
|
|
|
* URL, $this->argv[0] is set to "home".
|
|
|
|
*
|
|
|
|
*/
|
|
|
|
|
2010-07-02 01:48:07 +02:00
|
|
|
$this->argv = explode('/',$this->cmd);
|
|
|
|
$this->argc = count($this->argv);
|
|
|
|
if((array_key_exists('0',$this->argv)) && strlen($this->argv[0])) {
|
|
|
|
$this->module = $this->argv[0];
|
|
|
|
}
|
|
|
|
else {
|
|
|
|
$this->module = 'home';
|
|
|
|
}
|
2010-07-24 01:33:34 +02:00
|
|
|
|
2010-12-11 05:21:34 +01:00
|
|
|
/**
|
|
|
|
* Special handling for the webfinger/lrdd host XRD file
|
|
|
|
* Just spit out the contents and exit.
|
|
|
|
*/
|
|
|
|
|
2010-09-27 02:24:20 +02:00
|
|
|
if($this->cmd === '.well-known/host-meta')
|
2010-07-24 01:33:34 +02:00
|
|
|
require_once('include/hostxrd.php');
|
|
|
|
|
2010-11-11 11:49:28 +01:00
|
|
|
|
2010-12-11 05:21:34 +01:00
|
|
|
/**
|
|
|
|
* See if there is any page number information, and initialise
|
|
|
|
* pagination
|
|
|
|
*/
|
|
|
|
|
2010-07-10 09:45:18 +02:00
|
|
|
$this->pager['page'] = ((x($_GET,'page')) ? $_GET['page'] : 1);
|
|
|
|
$this->pager['itemspage'] = 50;
|
|
|
|
$this->pager['start'] = ($this->pager['page'] * $this->pager['itemspage']) - $this->pager['itemspage'];
|
|
|
|
$this->pager['total'] = 0;
|
2010-07-02 01:48:07 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
function get_baseurl($ssl = false) {
|
2010-07-19 05:49:10 +02:00
|
|
|
|
2011-01-30 07:35:11 +01:00
|
|
|
$scheme = $this->scheme;
|
|
|
|
|
2011-01-31 04:38:03 +01:00
|
|
|
if(x($this->config,'ssl_policy')) {
|
|
|
|
if(($ssl) || ($this->config['ssl_policy'] == SSL_POLICY_FULL))
|
|
|
|
$scheme = 'https';
|
|
|
|
if(($this->config['ssl_policy'] == SSL_POLICY_SELFSIGN) && (local_user() || x($_POST,'auth-params')))
|
|
|
|
$scheme = 'https';
|
|
|
|
}
|
2011-01-30 07:35:11 +01:00
|
|
|
|
2011-01-30 07:38:58 +01:00
|
|
|
$this->baseurl = $scheme . "://" . $this->hostname . ((isset($this->path) && strlen($this->path)) ? '/' . $this->path : '' );
|
2010-07-19 05:49:10 +02:00
|
|
|
return $this->baseurl;
|
|
|
|
}
|
|
|
|
|
|
|
|
function set_baseurl($url) {
|
2011-02-07 04:15:20 +01:00
|
|
|
$parsed = parse_url($url);
|
|
|
|
|
2010-07-19 05:49:10 +02:00
|
|
|
$this->baseurl = $url;
|
2011-02-07 04:15:20 +01:00
|
|
|
|
|
|
|
if($parsed) {
|
|
|
|
$this->scheme = $parsed['scheme'];
|
|
|
|
|
|
|
|
$this->hostname = $parsed['host'];
|
2011-02-09 06:26:28 +01:00
|
|
|
if(x($parsed,'port'))
|
2011-02-07 04:15:20 +01:00
|
|
|
$this->hostname .= ':' . $parsed['port'];
|
2011-02-09 06:26:28 +01:00
|
|
|
if(x($parsed,'path'))
|
2011-02-07 04:15:20 +01:00
|
|
|
$this->path = trim($parsed['path'],'\\/');
|
|
|
|
}
|
|
|
|
|
2010-07-02 01:48:07 +02:00
|
|
|
}
|
|
|
|
|
2010-07-19 08:23:18 +02:00
|
|
|
function get_hostname() {
|
|
|
|
return $this->hostname;
|
|
|
|
}
|
|
|
|
|
|
|
|
function set_hostname($h) {
|
|
|
|
$this->hostname = $h;
|
|
|
|
}
|
2010-07-19 05:49:10 +02:00
|
|
|
|
2010-07-02 01:48:07 +02:00
|
|
|
function set_path($p) {
|
2010-10-20 00:51:56 +02:00
|
|
|
$this->path = trim(trim($p),'/');
|
2010-07-02 01:48:07 +02:00
|
|
|
}
|
|
|
|
|
2010-07-20 07:52:31 +02:00
|
|
|
function get_path() {
|
|
|
|
return $this->path;
|
|
|
|
}
|
|
|
|
|
2010-07-10 09:45:18 +02:00
|
|
|
function set_pager_total($n) {
|
|
|
|
$this->pager['total'] = intval($n);
|
|
|
|
}
|
2010-07-20 07:52:31 +02:00
|
|
|
|
2010-07-10 09:45:18 +02:00
|
|
|
function set_pager_itemspage($n) {
|
|
|
|
$this->pager['itemspage'] = intval($n);
|
|
|
|
$this->pager['start'] = ($this->pager['page'] * $this->pager['itemspage']) - $this->pager['itemspage'];
|
|
|
|
|
|
|
|
}
|
|
|
|
|
2010-07-02 01:48:07 +02:00
|
|
|
function init_pagehead() {
|
2011-01-03 10:03:21 +01:00
|
|
|
$this->page['title'] = $this->config['sitename'];
|
2010-09-23 03:00:19 +02:00
|
|
|
$tpl = load_view_file("view/head.tpl");
|
|
|
|
$this->page['htmlhead'] = replace_macros($tpl,array(
|
2011-01-14 11:04:09 +01:00
|
|
|
'$baseurl' => $this->get_baseurl() . '/',
|
|
|
|
'$generator' => 'Friendika' . ' ' . FRIENDIKA_VERSION
|
2010-08-16 14:23:26 +02:00
|
|
|
));
|
2010-07-02 01:48:07 +02:00
|
|
|
}
|
|
|
|
|
2010-10-14 07:01:23 +02:00
|
|
|
function set_curl_code($code) {
|
|
|
|
$this->curl_code = $code;
|
|
|
|
}
|
|
|
|
|
|
|
|
function get_curl_code() {
|
|
|
|
return $this->curl_code;
|
|
|
|
}
|
|
|
|
|
2010-10-21 13:53:43 +02:00
|
|
|
function set_curl_headers($headers) {
|
|
|
|
$this->curl_headers = $headers;
|
|
|
|
}
|
|
|
|
|
|
|
|
function get_curl_headers() {
|
|
|
|
return $this->curl_headers;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
2010-07-02 01:48:07 +02:00
|
|
|
}}
|
|
|
|
|
2010-10-07 02:40:58 +02:00
|
|
|
// retrieve the App structure
|
|
|
|
// useful in functions which require it but don't get it passed to them
|
|
|
|
|
|
|
|
if(! function_exists('get_app')) {
|
|
|
|
function get_app() {
|
|
|
|
global $a;
|
|
|
|
return $a;
|
|
|
|
}};
|
|
|
|
|
2010-07-02 01:48:07 +02:00
|
|
|
|
2010-09-28 02:16:52 +02:00
|
|
|
// Multi-purpose function to check variable state.
|
|
|
|
// Usage: x($var) or $x($array,'key')
|
|
|
|
// returns false if variable/key is not set
|
|
|
|
// if variable is set, returns 1 if has 'non-zero' value, otherwise returns 0.
|
|
|
|
// e.g. x('') or x(0) returns 0;
|
|
|
|
|
2010-07-02 01:48:07 +02:00
|
|
|
if(! function_exists('x')) {
|
|
|
|
function x($s,$k = NULL) {
|
|
|
|
if($k != NULL) {
|
|
|
|
if((is_array($s)) && (array_key_exists($k,$s))) {
|
|
|
|
if($s[$k])
|
|
|
|
return (int) 1;
|
|
|
|
return (int) 0;
|
|
|
|
}
|
|
|
|
return false;
|
|
|
|
}
|
|
|
|
else {
|
|
|
|
if(isset($s)) {
|
|
|
|
if($s) {
|
|
|
|
return (int) 1;
|
|
|
|
}
|
|
|
|
return (int) 0;
|
|
|
|
}
|
|
|
|
return false;
|
|
|
|
}
|
|
|
|
}}
|
|
|
|
|
2010-09-28 02:16:52 +02:00
|
|
|
// called from db initialisation if db is dead.
|
|
|
|
|
2010-07-02 01:48:07 +02:00
|
|
|
if(! function_exists('system_unavailable')) {
|
|
|
|
function system_unavailable() {
|
|
|
|
include('system_unavailable.php');
|
|
|
|
killme();
|
|
|
|
}}
|
|
|
|
|
2010-09-28 02:16:52 +02:00
|
|
|
// Primarily involved with database upgrade, but also sets the
|
|
|
|
// base url for use in cmdline programs which don't have
|
2010-12-22 23:16:22 +01:00
|
|
|
// $_SERVER variables, and synchronising the state of installed plugins.
|
|
|
|
|
2010-08-15 03:11:36 +02:00
|
|
|
|
|
|
|
if(! function_exists('check_config')) {
|
|
|
|
function check_config(&$a) {
|
2010-08-16 07:43:42 +02:00
|
|
|
|
2011-02-07 04:15:20 +01:00
|
|
|
|
2010-08-19 13:59:31 +02:00
|
|
|
load_config('system');
|
|
|
|
|
2011-02-07 04:15:20 +01:00
|
|
|
if(! x($_SERVER,'SERVER_NAME'))
|
|
|
|
return;
|
|
|
|
|
2010-08-16 07:43:42 +02:00
|
|
|
$build = get_config('system','build');
|
|
|
|
if(! x($build))
|
|
|
|
$build = set_config('system','build',BUILD_ID);
|
|
|
|
|
|
|
|
$url = get_config('system','url');
|
|
|
|
if(! x($url))
|
|
|
|
$url = set_config('system','url',$a->get_baseurl());
|
|
|
|
|
|
|
|
if($build != BUILD_ID) {
|
|
|
|
$stored = intval($build);
|
|
|
|
$current = intval(BUILD_ID);
|
|
|
|
if(($stored < $current) && file_exists('update.php')) {
|
|
|
|
// We're reporting a different version than what is currently installed.
|
|
|
|
// Run any existing update scripts to bring the database up to current.
|
|
|
|
|
|
|
|
require_once('update.php');
|
2010-08-31 06:08:45 +02:00
|
|
|
for($x = $stored; $x < $current; $x ++) {
|
2010-08-16 07:43:42 +02:00
|
|
|
if(function_exists('update_' . $x)) {
|
|
|
|
$func = 'update_' . $x;
|
|
|
|
$func($a);
|
2010-08-15 04:31:10 +02:00
|
|
|
}
|
|
|
|
}
|
2010-08-16 07:43:42 +02:00
|
|
|
set_config('system','build', BUILD_ID);
|
2010-08-15 04:31:10 +02:00
|
|
|
}
|
|
|
|
}
|
2010-12-22 23:16:22 +01:00
|
|
|
|
|
|
|
/**
|
|
|
|
*
|
|
|
|
* Synchronise plugins:
|
|
|
|
*
|
|
|
|
* $a->config['system']['addon'] contains a comma-separated list of names
|
|
|
|
* of plugins/addons which are used on this system.
|
|
|
|
* Go through the database list of already installed addons, and if we have
|
|
|
|
* an entry, but it isn't in the config list, call the uninstall procedure
|
|
|
|
* and mark it uninstalled in the database (for now we'll remove it).
|
|
|
|
* Then go through the config list and if we have a plugin that isn't installed,
|
|
|
|
* call the install procedure and add it to the database.
|
|
|
|
*
|
|
|
|
*/
|
|
|
|
|
|
|
|
$r = q("SELECT * FROM `addon` WHERE `installed` = 1");
|
|
|
|
if(count($r))
|
|
|
|
$installed = $r;
|
2010-12-23 02:25:58 +01:00
|
|
|
else
|
|
|
|
$installed = array();
|
2010-12-22 23:16:22 +01:00
|
|
|
|
|
|
|
$plugins = get_config('system','addon');
|
|
|
|
$plugins_arr = array();
|
|
|
|
|
|
|
|
if($plugins)
|
|
|
|
$plugins_arr = explode(',',str_replace(' ', '',$plugins));
|
|
|
|
|
2011-02-11 01:17:21 +01:00
|
|
|
$a->plugins = $plugins_arr;
|
|
|
|
|
2010-12-22 23:16:22 +01:00
|
|
|
$installed_arr = array();
|
2010-12-23 02:25:58 +01:00
|
|
|
|
|
|
|
if(count($installed)) {
|
|
|
|
foreach($installed as $i) {
|
|
|
|
if(! in_array($i['name'],$plugins_arr)) {
|
|
|
|
logger("Addons: uninstalling " . $i['name']);
|
|
|
|
q("DELETE FROM `addon` WHERE `id` = %d LIMIT 1",
|
|
|
|
intval($i['id'])
|
|
|
|
);
|
|
|
|
|
|
|
|
@include_once('addon/' . $i['name'] . '/' . $i['name'] . '.php');
|
|
|
|
if(function_exists($i['name'] . '_uninstall')) {
|
|
|
|
$func = $i['name'] . '_uninstall';
|
|
|
|
$func();
|
|
|
|
}
|
2010-12-22 23:16:22 +01:00
|
|
|
}
|
2010-12-23 02:25:58 +01:00
|
|
|
else
|
|
|
|
$installed_arr[] = $i['name'];
|
2010-12-22 23:16:22 +01:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
if(count($plugins_arr)) {
|
|
|
|
foreach($plugins_arr as $p) {
|
|
|
|
if(! in_array($p,$installed_arr)) {
|
|
|
|
logger("Addons: installing " . $p);
|
|
|
|
@include_once('addon/' . $p . '/' . $p . '.php');
|
|
|
|
if(function_exists($p . '_install')) {
|
|
|
|
$func = $p . '_install';
|
|
|
|
$func();
|
|
|
|
$r = q("INSERT INTO `addon` (`name`, `installed`) VALUES ( '%s', 1 ) ",
|
|
|
|
dbesc($p)
|
|
|
|
);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2010-08-15 04:31:10 +02:00
|
|
|
return;
|
2010-08-15 03:11:36 +02:00
|
|
|
}}
|
|
|
|
|
|
|
|
|
2010-09-28 02:16:52 +02:00
|
|
|
// This is our template processor.
|
|
|
|
// $s is the string requiring macro substitution.
|
|
|
|
// $r is an array of key value pairs (search => replace)
|
|
|
|
// returns substituted string.
|
2010-10-06 04:56:09 +02:00
|
|
|
// WARNING: this is pretty basic, and doesn't properly handle search strings that are substrings of each other.
|
|
|
|
// For instance if 'test' => "foo" and 'testing' => "bar", testing could become either bar or fooing,
|
|
|
|
// depending on the order in which they were declared in the array.
|
2010-08-15 03:11:36 +02:00
|
|
|
|
2010-07-02 01:48:07 +02:00
|
|
|
if(! function_exists('replace_macros')) {
|
|
|
|
function replace_macros($s,$r) {
|
|
|
|
|
|
|
|
$search = array();
|
|
|
|
$replace = array();
|
|
|
|
|
|
|
|
if(is_array($r) && count($r)) {
|
|
|
|
foreach ($r as $k => $v ) {
|
|
|
|
$search[] = $k;
|
|
|
|
$replace[] = $v;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
return str_replace($search,$replace,$s);
|
|
|
|
}}
|
|
|
|
|
|
|
|
|
2010-10-13 11:47:32 +02:00
|
|
|
// load string translation table for alternate language
|
2010-09-28 02:16:52 +02:00
|
|
|
|
2010-08-09 06:03:08 +02:00
|
|
|
if(! function_exists('load_translation_table')) {
|
2010-07-27 07:48:08 +02:00
|
|
|
function load_translation_table($lang) {
|
|
|
|
global $a;
|
|
|
|
|
2010-10-07 02:40:58 +02:00
|
|
|
if(file_exists("view/$lang/strings.php"))
|
|
|
|
include("view/$lang/strings.php");
|
2010-08-09 06:03:08 +02:00
|
|
|
}}
|
2010-07-27 07:48:08 +02:00
|
|
|
|
2010-09-28 02:16:52 +02:00
|
|
|
// translate string if translation exists
|
|
|
|
|
2010-08-09 06:03:08 +02:00
|
|
|
if(! function_exists('t')) {
|
2010-07-27 07:48:08 +02:00
|
|
|
function t($s) {
|
2010-11-09 02:30:00 +01:00
|
|
|
|
2010-10-07 02:40:58 +02:00
|
|
|
$a = get_app();
|
2010-07-27 07:48:08 +02:00
|
|
|
|
2010-11-09 02:30:00 +01:00
|
|
|
if(x($a->strings,$s))
|
2010-07-27 07:48:08 +02:00
|
|
|
return $a->strings[$s];
|
|
|
|
return $s;
|
2010-08-09 06:03:08 +02:00
|
|
|
}}
|
2010-07-02 01:48:07 +02:00
|
|
|
|
2010-09-28 02:16:52 +02:00
|
|
|
// curl wrapper. If binary flag is true, return binary
|
|
|
|
// results.
|
|
|
|
|
2010-07-02 01:48:07 +02:00
|
|
|
if(! function_exists('fetch_url')) {
|
2010-10-21 13:53:43 +02:00
|
|
|
function fetch_url($url,$binary = false, &$redirects = 0) {
|
2010-11-26 01:13:10 +01:00
|
|
|
|
|
|
|
$a = get_app();
|
|
|
|
|
2010-07-02 01:48:07 +02:00
|
|
|
$ch = curl_init($url);
|
2010-10-21 13:53:43 +02:00
|
|
|
if(($redirects > 8) || (! $ch))
|
|
|
|
return false;
|
2010-07-02 01:48:07 +02:00
|
|
|
|
2010-10-22 01:45:26 +02:00
|
|
|
curl_setopt($ch, CURLOPT_HEADER, true);
|
2010-07-02 01:48:07 +02:00
|
|
|
curl_setopt($ch, CURLOPT_RETURNTRANSFER,true);
|
2010-10-05 01:04:52 +02:00
|
|
|
|
2010-11-16 01:49:27 +01:00
|
|
|
|
|
|
|
$curl_time = intval(get_config('system','curl_timeout'));
|
2010-11-22 08:00:01 +01:00
|
|
|
curl_setopt($ch, CURLOPT_TIMEOUT, (($curl_time !== false) ? $curl_time : 60));
|
2010-11-16 01:49:27 +01:00
|
|
|
|
2010-10-05 01:04:52 +02:00
|
|
|
// by default we will allow self-signed certs
|
|
|
|
// but you can override this
|
|
|
|
|
|
|
|
$check_cert = get_config('system','verifyssl');
|
|
|
|
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, (($check_cert) ? true : false));
|
|
|
|
|
2010-08-18 03:44:13 +02:00
|
|
|
$prx = get_config('system','proxy');
|
|
|
|
if(strlen($prx)) {
|
|
|
|
curl_setopt($ch, CURLOPT_HTTPPROXYTUNNEL, 1);
|
|
|
|
curl_setopt($ch, CURLOPT_PROXY, $prx);
|
|
|
|
$prxusr = get_config('system','proxyuser');
|
|
|
|
if(strlen($prxusr))
|
|
|
|
curl_setopt($ch, CURLOPT_PROXYUSERPWD, $prxusr);
|
|
|
|
}
|
2010-07-02 01:48:07 +02:00
|
|
|
if($binary)
|
|
|
|
curl_setopt($ch, CURLOPT_BINARYTRANSFER,1);
|
|
|
|
|
2010-11-26 00:03:59 +01:00
|
|
|
$a->set_curl_code(0);
|
|
|
|
|
2010-12-09 23:03:28 +01:00
|
|
|
// don't let curl abort the entire application
|
|
|
|
// if it throws any errors.
|
|
|
|
|
|
|
|
$s = @curl_exec($ch);
|
2010-10-21 13:53:43 +02:00
|
|
|
|
2010-11-22 08:00:01 +01:00
|
|
|
$http_code = intval(curl_getinfo($ch, CURLINFO_HTTP_CODE));
|
2010-10-21 13:53:43 +02:00
|
|
|
$header = substr($s,0,strpos($s,"\r\n\r\n"));
|
2010-10-22 01:45:26 +02:00
|
|
|
if(stristr($header,'100') && (strlen($header) < 30)) {
|
|
|
|
// 100 Continue has two headers, get the real one
|
|
|
|
$s = substr($s,strlen($header)+4);
|
|
|
|
$header = substr($s,0,strpos($s,"\r\n\r\n"));
|
|
|
|
}
|
2010-10-21 13:53:43 +02:00
|
|
|
if($http_code == 301 || $http_code == 302 || $http_code == 303) {
|
|
|
|
$matches = array();
|
|
|
|
preg_match('/(Location:|URI:)(.*?)\n/', $header, $matches);
|
|
|
|
$url = trim(array_pop($matches));
|
|
|
|
$url_parsed = parse_url($url);
|
|
|
|
if (isset($url_parsed)) {
|
|
|
|
$redirects++;
|
|
|
|
return fetch_url($url,$binary,$redirects);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
$a->set_curl_code($http_code);
|
2011-02-08 08:20:38 +01:00
|
|
|
|
2010-10-21 13:53:43 +02:00
|
|
|
$body = substr($s,strlen($header)+4);
|
2011-02-08 08:20:38 +01:00
|
|
|
|
|
|
|
/* one more try to make sure there are no more headers */
|
|
|
|
|
|
|
|
if(strpos($body,'HTTP/') === 0) {
|
|
|
|
$header = substr($body,0,strpos($body,"\r\n\r\n"));
|
|
|
|
$body = substr($body,strlen($header)+4);
|
|
|
|
}
|
|
|
|
|
2010-10-21 13:53:43 +02:00
|
|
|
$a->set_curl_headers($header);
|
|
|
|
|
2010-07-02 01:48:07 +02:00
|
|
|
curl_close($ch);
|
2010-10-22 01:45:26 +02:00
|
|
|
return($body);
|
2010-07-02 01:48:07 +02:00
|
|
|
}}
|
|
|
|
|
2010-09-28 02:16:52 +02:00
|
|
|
// post request to $url. $params is an array of post variables.
|
2010-07-02 01:48:07 +02:00
|
|
|
|
|
|
|
if(! function_exists('post_url')) {
|
2010-10-26 06:52:30 +02:00
|
|
|
function post_url($url,$params, $headers = null, &$redirects = 0) {
|
2010-11-26 01:13:10 +01:00
|
|
|
$a = get_app();
|
2010-07-02 01:48:07 +02:00
|
|
|
$ch = curl_init($url);
|
2010-10-21 13:53:43 +02:00
|
|
|
if(($redirects > 8) || (! $ch))
|
|
|
|
return false;
|
2010-07-02 01:48:07 +02:00
|
|
|
|
2010-10-22 01:45:26 +02:00
|
|
|
curl_setopt($ch, CURLOPT_HEADER, true);
|
2010-07-02 01:48:07 +02:00
|
|
|
curl_setopt($ch, CURLOPT_RETURNTRANSFER,true);
|
|
|
|
curl_setopt($ch, CURLOPT_POST,1);
|
|
|
|
curl_setopt($ch, CURLOPT_POSTFIELDS,$params);
|
2010-10-21 13:53:43 +02:00
|
|
|
|
2010-11-16 01:49:27 +01:00
|
|
|
$curl_time = intval(get_config('system','curl_timeout'));
|
2010-11-22 08:00:01 +01:00
|
|
|
curl_setopt($ch, CURLOPT_TIMEOUT, (($curl_time !== false) ? $curl_time : 60));
|
2010-11-16 01:49:27 +01:00
|
|
|
|
2010-10-26 06:52:30 +02:00
|
|
|
if(is_array($headers))
|
|
|
|
curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
|
|
|
|
|
2010-10-05 01:04:52 +02:00
|
|
|
$check_cert = get_config('system','verifyssl');
|
|
|
|
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, (($check_cert) ? true : false));
|
2010-08-18 03:44:13 +02:00
|
|
|
$prx = get_config('system','proxy');
|
|
|
|
if(strlen($prx)) {
|
|
|
|
curl_setopt($ch, CURLOPT_HTTPPROXYTUNNEL, 1);
|
|
|
|
curl_setopt($ch, CURLOPT_PROXY, $prx);
|
|
|
|
$prxusr = get_config('system','proxyuser');
|
|
|
|
if(strlen($prxusr))
|
|
|
|
curl_setopt($ch, CURLOPT_PROXYUSERPWD, $prxusr);
|
|
|
|
}
|
2010-07-02 01:48:07 +02:00
|
|
|
|
2010-11-26 00:03:59 +01:00
|
|
|
$a->set_curl_code(0);
|
|
|
|
|
2010-12-09 23:03:28 +01:00
|
|
|
// don't let curl abort the entire application
|
|
|
|
// if it throws any errors.
|
|
|
|
|
|
|
|
$s = @curl_exec($ch);
|
2010-10-21 13:53:43 +02:00
|
|
|
|
2010-11-22 08:00:01 +01:00
|
|
|
$http_code = intval(curl_getinfo($ch, CURLINFO_HTTP_CODE));
|
2010-10-21 13:53:43 +02:00
|
|
|
$header = substr($s,0,strpos($s,"\r\n\r\n"));
|
2010-10-22 01:45:26 +02:00
|
|
|
if(stristr($header,'100') && (strlen($header) < 30)) {
|
|
|
|
// 100 Continue has two headers, get the real one
|
|
|
|
$s = substr($s,strlen($header)+4);
|
|
|
|
$header = substr($s,0,strpos($s,"\r\n\r\n"));
|
|
|
|
}
|
2010-10-21 13:53:43 +02:00
|
|
|
if($http_code == 301 || $http_code == 302 || $http_code == 303) {
|
|
|
|
$matches = array();
|
|
|
|
preg_match('/(Location:|URI:)(.*?)\n/', $header, $matches);
|
|
|
|
$url = trim(array_pop($matches));
|
|
|
|
$url_parsed = parse_url($url);
|
|
|
|
if (isset($url_parsed)) {
|
|
|
|
$redirects++;
|
2010-10-26 06:52:30 +02:00
|
|
|
return post_url($url,$binary,$headers,$redirects);
|
2010-10-21 13:53:43 +02:00
|
|
|
}
|
|
|
|
}
|
|
|
|
$a->set_curl_code($http_code);
|
|
|
|
$body = substr($s,strlen($header)+4);
|
2011-02-08 08:20:38 +01:00
|
|
|
|
|
|
|
/* one more try to make sure there are no more headers */
|
|
|
|
|
|
|
|
if(strpos($body,'HTTP/') === 0) {
|
|
|
|
$header = substr($body,0,strpos($body,"\r\n\r\n"));
|
|
|
|
$body = substr($body,strlen($header)+4);
|
|
|
|
}
|
|
|
|
|
2010-10-21 13:53:43 +02:00
|
|
|
$a->set_curl_headers($header);
|
|
|
|
|
2010-07-02 01:48:07 +02:00
|
|
|
curl_close($ch);
|
2010-10-22 01:45:26 +02:00
|
|
|
return($body);
|
2010-07-02 01:48:07 +02:00
|
|
|
}}
|
|
|
|
|
2010-09-28 02:16:52 +02:00
|
|
|
// random hash, 64 chars
|
2010-07-02 01:48:07 +02:00
|
|
|
|
|
|
|
if(! function_exists('random_string')) {
|
|
|
|
function random_string() {
|
|
|
|
return(hash('sha256',uniqid(rand(),true)));
|
|
|
|
}}
|
|
|
|
|
2010-12-07 23:37:56 +01:00
|
|
|
/**
|
|
|
|
* This is our primary input filter.
|
|
|
|
*
|
|
|
|
* The high bit hack only involved some old IE browser, forget which (IE5/Mac?)
|
|
|
|
* that had an XSS attack vector due to stripping the high-bit on an 8-bit character
|
|
|
|
* after cleansing, and angle chars with the high bit set could get through as markup.
|
|
|
|
*
|
|
|
|
* This is now disabled because it was interfering with some legitimate unicode sequences
|
|
|
|
* and hopefully there aren't a lot of those browsers left.
|
|
|
|
*
|
|
|
|
* Use this on any text input where angle chars are not valid or permitted
|
|
|
|
* They will be replaced with safer brackets. This may be filtered further
|
|
|
|
* if these are not allowed either.
|
|
|
|
*
|
|
|
|
*/
|
2010-09-28 02:16:52 +02:00
|
|
|
|
2010-07-02 01:48:07 +02:00
|
|
|
if(! function_exists('notags')) {
|
|
|
|
function notags($string) {
|
2010-12-07 23:37:56 +01:00
|
|
|
|
|
|
|
return(str_replace(array("<",">"), array('[',']'), $string));
|
|
|
|
|
|
|
|
// High-bit filter no longer used
|
|
|
|
// return(str_replace(array("<",">","\xBA","\xBC","\xBE"), array('[',']','','',''), $string));
|
2010-07-02 01:48:07 +02:00
|
|
|
}}
|
|
|
|
|
2010-09-28 02:16:52 +02:00
|
|
|
// use this on "body" or "content" input where angle chars shouldn't be removed,
|
|
|
|
// and allow them to be safely displayed.
|
|
|
|
|
2010-07-02 01:48:07 +02:00
|
|
|
if(! function_exists('escape_tags')) {
|
|
|
|
function escape_tags($string) {
|
2010-07-19 15:58:03 +02:00
|
|
|
|
|
|
|
return(htmlspecialchars($string));
|
2010-07-02 01:48:07 +02:00
|
|
|
}}
|
|
|
|
|
2010-09-28 02:16:52 +02:00
|
|
|
// wrapper for adding a login box. If $register == true provide a registration
|
|
|
|
// link. This will most always depend on the value of $a->config['register_policy'].
|
2010-10-13 11:47:32 +02:00
|
|
|
// returns the complete html for inserting into the page
|
2010-09-28 02:16:52 +02:00
|
|
|
|
2010-07-02 01:48:07 +02:00
|
|
|
if(! function_exists('login')) {
|
|
|
|
function login($register = false) {
|
|
|
|
$o = "";
|
2010-09-23 03:00:19 +02:00
|
|
|
$register_html = (($register) ? load_view_file("view/register-link.tpl") : "");
|
2010-07-02 01:48:07 +02:00
|
|
|
|
2010-11-29 05:58:23 +01:00
|
|
|
$noid = get_config('system','no_openid');
|
|
|
|
if($noid) {
|
|
|
|
$classname = 'no-openid';
|
|
|
|
$namelabel = t('Nickname or Email address: ');
|
|